added yahoo xss-filters

This commit is contained in:
davetayls 2015-04-10 11:08:40 +01:00
parent d5f92f93bd
commit 229a641cc8
2 changed files with 80 additions and 0 deletions

View File

@ -0,0 +1,37 @@
/// <reference path="./xss-filters.d.ts" />
import xssFilters = require('xss-filters');
var s = '<script>alert("hello")</script>';
xssFilters.inHTMLComment(s);
xssFilters.inHTMLData(s);
xssFilters.inDoubleQuotedAttr(s);
xssFilters.inSingleQuotedAttr(s);
xssFilters.inUnQuotedAttr(s);
xssFilters.uriInHTMLComment(s);
xssFilters.uriInHTMLData(s);
xssFilters.uriInDoubleQuotedAttr(s);
xssFilters.uriInSingleQuotedAttr(s);
xssFilters.uriInUnQuotedAttr(s);
xssFilters.uriPathInHTMLComment(s);
xssFilters.uriPathInHTMLData(s);
xssFilters.uriPathInDoubleQuotedAttr(s);
xssFilters.uriPathInSingleQuotedAttr(s);
xssFilters.uriPathInUnQuotedAttr(s);
xssFilters.uriQueryInHTMLComment(s);
xssFilters.uriQueryInHTMLData(s);
xssFilters.uriQueryInDoubleQuotedAttr(s);
xssFilters.uriQueryInSingleQuotedAttr(s);
xssFilters.uriQueryInUnQuotedAttr(s);
xssFilters.uriComponentInHTMLComment(s);
xssFilters.uriComponentInHTMLData(s);
xssFilters.uriComponentInDoubleQuotedAttr(s);
xssFilters.uriComponentInSingleQuotedAttr(s);
xssFilters.uriComponentInUnQuotedAttr(s);
xssFilters.uriFragmentInHTMLComment(s);
xssFilters.uriFragmentInHTMLData(s);
xssFilters.uriFragmentInDoubleQuotedAttr(s);
xssFilters.uriFragmentInSingleQuotedAttr(s);
xssFilters.uriFragmentInUnQuotedAttr(s);

43
xss-filters/xss-filters.d.ts vendored Normal file
View File

@ -0,0 +1,43 @@
// Type definitions for Yahoo XSS Filters
// Project: https://github.com/yahoo/xss-filters
// Definitions by: Dave Taylor <http://davetayls.me>
// Definitions: https://github.com/borisyankov/DefinitelyTyped
interface XSSFilters {
inHTMLComment(s:string):string;
inHTMLData(s:string):string;
inDoubleQuotedAttr(s:string):string;
inSingleQuotedAttr(s:string):string;
inUnQuotedAttr(s:string):string;
uriInHTMLComment(s:string):string;
uriInHTMLData(s:string):string;
uriInDoubleQuotedAttr(s:string):string;
uriInSingleQuotedAttr(s:string):string;
uriInUnQuotedAttr(s:string):string;
uriPathInHTMLComment(s:string):string;
uriPathInHTMLData(s:string):string;
uriPathInDoubleQuotedAttr(s:string):string;
uriPathInSingleQuotedAttr(s:string):string;
uriPathInUnQuotedAttr(s:string):string;
uriQueryInHTMLComment(s:string):string;
uriQueryInHTMLData(s:string):string;
uriQueryInDoubleQuotedAttr(s:string):string;
uriQueryInSingleQuotedAttr(s:string):string;
uriQueryInUnQuotedAttr(s:string):string;
uriComponentInHTMLComment(s:string):string;
uriComponentInHTMLData(s:string):string;
uriComponentInDoubleQuotedAttr(s:string):string;
uriComponentInSingleQuotedAttr(s:string):string;
uriComponentInUnQuotedAttr(s:string):string;
uriFragmentInHTMLComment(s:string):string;
uriFragmentInHTMLData(s:string):string;
uriFragmentInDoubleQuotedAttr(s:string):string;
uriFragmentInSingleQuotedAttr(s:string):string;
uriFragmentInUnQuotedAttr(s:string):string;
}
declare var xssFilters:XSSFilters;
declare module 'xss-filters' {
export = xssFilters;
}